Maintenance in progress

a coordinated late-july attack took control of water and wastewater systems in more than thirty minnesota communities, using small industrial controllers that were connected directly to the open internet; attackers changed device passwords and addresses, causing loss of pressure and risk of untreated groundwater entering supply. separately, an unauthenticated flaw in the n-able n-central remote management platform was confirmed under active exploitation, giving admin control of every endpoint managed by a compromised server.

us municipal utilities and vendor advisories